Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jZs1oyehku1bSNqroL8phEeIDGY.roa
File: jZs1oyehku1bSNqroL8phEeIDGY.roa (raw, json)
Hash identifier: H+YWlWuMfkdt63vRiOiCvsqIizdkd33FnxK0SnJJUVE=
Subject key identifier: 8D:9B:35:A3:27:A1:92:ED:5B:48:DA:AB:A0:BF:29:84:47:88:0C:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A15DF38251E7AA0B02DD7B5E2FBAD3B49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jZs1oyehku1bSNqroL8phEeIDGY.roa
Signing time: Mon 21 Aug 2023 02:14:24 +0000
ROA not before: Mon 21 Aug 2023 02:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:df:38:25:1e:7a:a0:b0:2d:d7:b5:e2:fb:ad:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 02:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9b35a327a192ed5b48daaba0bf298447880c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:cd:8c:90:dc:66:8b:99:ff:4d:42:6a:f5:
a2:5b:f0:e4:41:8b:65:35:69:af:83:d8:91:2e:11:
26:0f:13:49:25:69:35:26:0a:f9:bc:ba:9e:a1:0c:
ae:ea:8a:74:78:3d:e0:4b:37:90:1e:d9:44:47:3d:
14:e6:e2:4e:dc:28:b9:c5:b7:3c:05:52:1e:a4:83:
ce:b9:a5:2b:53:ad:8f:7c:8a:5f:cc:81:98:69:8a:
8e:d2:d2:54:58:34:52:1e:57:ae:8c:61:ac:e2:e3:
6f:3e:91:c2:d8:8e:71:b0:5b:0b:d9:cd:df:9d:66:
7b:08:5f:de:48:2f:1a:55:44:4c:6e:89:41:e2:7d:
d4:4b:fd:7a:3d:83:a0:43:3c:68:37:19:e8:88:fc:
27:fb:9b:76:13:aa:c3:b6:4a:fb:ad:be:4c:90:86:
a8:62:c7:77:32:db:1c:b1:95:eb:0f:a2:a4:92:7a:
25:42:30:16:f9:bd:f5:f1:a2:19:11:73:da:ee:a3:
21:a5:5a:52:11:5e:62:f7:95:0d:15:3a:9b:07:1d:
b3:57:7e:ea:f3:38:18:4c:c7:4f:d7:d8:af:be:ae:
ac:e6:0f:3a:e4:77:db:a7:08:16:8f:3d:b3:e0:f6:
ff:95:25:67:f8:da:45:2d:d6:83:2b:79:d1:81:f9:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:35:A3:27:A1:92:ED:5B:48:DA:AB:A0:BF:29:84:47:88:0C:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jZs1oyehku1bSNqroL8phEeIDGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:11:bd:d3:10:7f:b1:d3:29:a0:e3:91:eb:19:72:9a:55:27:
ad:5f:d2:31:54:88:9f:5e:bf:f9:62:4a:c2:86:16:65:4e:1d:
da:8d:f5:eb:4b:68:11:dd:49:e3:a0:07:73:7e:52:10:f0:6b:
1c:c6:09:41:2d:9b:10:7b:10:9c:4a:8e:0e:3e:2b:c6:f4:be:
d1:6e:2a:4b:52:d0:58:1b:c7:d0:1b:9a:f6:64:9f:59:9e:c7:
75:75:ab:02:ee:2f:03:b1:c0:f6:de:cb:4f:86:ec:b9:e3:60:
17:f2:fb:1b:5f:84:0c:4e:84:44:a4:7f:f6:68:2c:84:7a:2a:
2e:e5:2b:70:25:2f:ff:f5:52:d9:11:84:a0:98:de:b7:bb:19:
e4:62:04:11:8b:b7:2f:de:9a:47:82:19:18:29:61:e6:62:2b:
f7:37:81:3b:91:59:11:fc:02:bf:25:95:62:71:87:02:ac:4e:
2c:18:ad:7c:5d:17:c4:2f:be:eb:ce:80:a3:03:2d:fe:5f:6b:
98:69:1e:05:99:3d:db:9e:ac:00:d8:65:25:60:59:6d:c9:cb:
a8:a5:d9:4f:77:fc:05:09:fc:ba:2a:bd:bc:3c:36:34:54:bf:
98:a6:b7:31:e3:68:63:e2:5a:96:53:92:c3:4e:c0:b0:d5:c0:
21:87:cb:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoV3zglHnqgsC3XteL7rTtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIxMDIxNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDliMzVhMzI3YTE5MmVkNWI0OGRhYWJhMGJmMjk4NDQ3ODgwYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnDNjJDcZouZ/01CavWiW/DkQYtl
NWmvg9iRLhEmDxNJJWk1Jgr5vLqeoQyu6op0eD3gSzeQHtlERz0U5uJO3Ci5xbc8
BVIepIPOuaUrU62PfIpfzIGYaYqO0tJUWDRSHleujGGs4uNvPpHC2I5xsFsL2c3f
nWZ7CF/eSC8aVURMbolB4n3US/16PYOgQzxoNxnoiPwn+5t2E6rDtkr7rb5MkIao
Ysd3MtscsZXrD6KkknolQjAW+b318aIZEXPa7qMhpVpSEV5i95UNFTqbBx2zV37q
8zgYTMdP19ivvq6s5g865HfbpwgWjz2z4Pb/lSVn+NpFLdaDK3nRgfmh6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI2bNaMnoZLtW0jaq6C/KYRHiAxmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvalpzMW95ZWhrdTFiU05xcm9MOHBoRWVJREdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADsRvdMQf7HTKaDjkesZ
cppVJ61f0jFUiJ9ev/liSsKGFmVOHdqN9etLaBHdSeOgB3N+UhDwaxzGCUEtmxB7
EJxKjg4+K8b0vtFuKktS0Fgbx9AbmvZkn1mex3V1qwLuLwOxwPbey0+G7LnjYBfy
+xtfhAxOhESkf/ZoLIR6Ki7lK3AlL//1UtkRhKCY3re7GeRiBBGLty/emkeCGRgp
YeZiK/c3gTuRWRH8Ar8llWJxhwKsTiwYrXxdF8QvvuvOgKMDLf5fa5hpHgWZPdue
rADYZSVgWW3Jy6il2U93/AUJ/Loqvbw8NjRUv5imtzHjaGPiWpZTksNOwLDVwCGH
y8M=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:40 2025 by rpki-client